Changelog

What's new

Newest first. We list what actually shipped — not the roadmap.

August 2026safeweave-mcp 0.7.0
  • –New: npx -y safeweave-mcp scan [dir] — run the same scanners from the terminal or CI, then exit. Formats: --format json|sarif|text; gate with --fail-on critical|high|medium (or --no-fail).
  • –SARIF output for GitHub code scanning, plus a GitHub Action that wraps the CLI.
  • –Argv is parsed before the TTY/MCP branch, so CI (non-TTY) runs the scan instead of starting the MCP server.
August 2026safeweave-mcp 0.6.x
  • –Cloud findings in your editor: get_cloud_findings, get_fix_context, fix_vulnerability, trigger_cloud_scan, and list_resources — 17 MCP tools total (plan-dependent).
  • –get_fix_context returns the vulnerable code with surrounding context so your AI can edit the file directly.
  • –Confidence scoring downgrades likely-noise findings (test files, examples) and prioritizes secrets and injection.
  • –README: corrected the free-trial wording (10 scans, no signup, then register) and the Cloud price ($20/mo).
August 2026Cloud
  • –Cloud scanning: connect a GitHub repo and every push and pull request is scanned by a managed runner.
  • –Results post back as a GitHub Check Run with inline annotations on the exact file and line.
  • –New dashboard pages: Integrations (connect GitHub), Repositories (connect + browse), and a per-repo security profile with vulnerability lifecycle (new / recurring / resolved / reopened).
  • –Per-repo shareable security score with a public score page.
EarlierScanners
  • –Eight scanners: SAST (Semgrep/Opengrep), secrets (Gitleaks), and dependencies free and local; IaC (Trivy), container (Trivy), DAST (Nuclei), license, and posture on Self-Hosted Pro.
  • –Scanner binaries download automatically on first run — no manual install.
  • –npx-first setup: run npx -y safeweave-mcp and get 10 free scans with no account.

The local-tier CLI (npx -y safeweave-mcp scan) and its GitHub Action shipped in 0.7.0.